SearchLeak
PulseAugur coverage of SearchLeak — every cluster mentioning SearchLeak across labs, papers, and developer communities, ranked by signal.
-
Critical "SearchLeak" vulnerability in Microsoft 365 Copilot allows data exfiltration
A critical vulnerability dubbed "SearchLeak" has been discovered in Microsoft 365 Copilot Enterprise, allowing attackers to exfiltrate sensitive data with a single click. The vulnerability chain, identified by Varonis T…
-
M365 Copilot vulnerability "SearchLeak" exposes sensitive data
A newly discovered vulnerability, dubbed "SearchLeak," in Microsoft's M365 Copilot has been detailed, highlighting significant security risks associated with rapid AI deployment. The flaw allows sensitive data to be exp…
-
SearchLeak technique enables prompt-injection attacks on Microsoft Copilot
A new technique called SearchLeak allows users to prompt-inject Microsoft Copilot by leveraging its search functionality. This method exploits Copilot's integration with Microsoft Bing to manipulate its responses. The v…
-
Microsoft 365 Copilot vulnerability allows data theft via single click · 4 sources tracked
Microsoft 365 Copilot has a vulnerability known as "SearchLeak" that allows attackers to potentially access sensitive user and organizational data. This flaw can be exploited with a single click, enabling the theft of e…
-
Microsoft patches critical Copilot vulnerability allowing 2FA code theft
Microsoft has patched a critical vulnerability in its M365 Copilot AI platform that allowed hackers to steal two-factor authentication (2FA) codes and other sensitive data. Researchers demonstrated an exploit, dubbed Se…
-
Microsoft's Token Capital, Copilot Vulnerability, and Meta's Surveillance Tech
Microsoft CEO Satya Nadella has proposed a concept called "Token Capital," which suggests that the concentration of AI models could lead to industrial hollowing. Separately, a critical vulnerability, CVE-2026-42824, has…
-
Author warns against AI agents due to privacy and security risks
The author expresses extreme caution regarding the use of AI agents, likening the experience to a relationship where a partner secretly shares all private information with unknown parties. This analogy highlights concer…
-
SearchLeak Attack Exposes Microsoft 365 Copilot Vulnerabilities
A new vulnerability dubbed SearchLeak has been identified that affects Microsoft 365 Copilot. The attack exploits three distinct bugs, none of which were individually critical, but together they pose a significant risk.…